On Tue, 20 Nov 2007 17:09:35 +0100
Mikael St=C3=A5ldal <mikael.staldal@univits.com> wrote:

quoted text
> Hello.
>=20
> > The proper way to enable port <=3D 1024 binding support is adding CAP_N=
ET_BIND_SERVICE=20
quoted text
>  > to the process capability set, e.g. by using file-system capabilities.
>=20
> Is file-system capabilites part of the stable official Linux kernel? From=
 which version?
quoted text
> How do I use it?
>=20

They were recently added in 2.6.24-rc1.
(mostly commit b53767719b6cd8789392ea3e7e2eb7b8906898f0)
The patch should be easy to backport, I've seen it in various
distro kernels.

According to the commit, documentation is at
http://www.friedhoff.org/fscaps.html

Some programs already have capability support - they
drop all permissions they don't need.